golang-github-containers-psgo: CVE-2022-1227

Debian Bug report logs - #1020907
golang-github-containers-psgo: CVE-2022-1227

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vignesh Raman <vignesh.raman@collabora.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: golang-github-containers-psgo: CVE-2022-1227

Date: Wed, 28 Sep 2022 16:00:51 +0530

[Message part 1 (text/plain, inline)]

Source: golang-github-containers-psgo
Version: 1.5.2-1
Severity: important
Tags: patch
X-Debbugs-Cc: vignesh.raman@collabora.com

Dear Maintainer,

The following vulnerability for golang-github-containers-psgo is fixed in bookworm,
https://security-tracker.debian.org/tracker/CVE-2022-1227

We have backported the CVE fixes to bullseye since we are working on
debian bullseye derivative and want to send the patches to debian.
We understand these issues are not DSA and have to go though a point
release.

Please could you review the attached patch and apply in bullseye.
Have created a merge request also for review
https://salsa.debian.org/go-team/packages/golang-github-containers-psgo/-/merge_requests/2

Regards,
Vignesh

-- System Information:
Debian Release: 11.1
  APT prefers stable
  APT policy: (700, 'stable'), (650, 'testing'), (600, 'unstable'), (500, 'stable-updates'), (500, 'stable-security')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-9-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=en_IN, LC_CTYPE=en_IN (charmap=UTF-8), LANGUAGE=en_IN:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

[0001-internal-proc-do-not-join-the-process-user-namespace.patch (text/plain, attachment)]

Message #16 received at 1020907-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: control@bugs.debian.org

Cc: 1020906-submitter@bugs.debian.org, 1020907-submitter@bugs.debian.org

Subject: closing 1020907, closing 1020906

Date: Wed, 28 Sep 2022 13:44:53 +0200

# track some metadata on fixed version
close 1020907 1.7.1+ds1-1
close 1020906 3.4.6+ds1-1
thanks

Send a report that this bug log contains spam.